68483 matches found
de4dot
Description de4dot is an open source GPLv3 .NET deobfuscator and unpacker written in C. It will try its best to restore a packed and obfuscated assembly to almost the original assembly. Most of the obfuscation can be completely restored eg. string encryption, but symbol renaming is impossible to...
CVE-2020-12124
物联网漏洞利用剖析——从亲手操作到远程代码执行 原文发表于 https://www.klogixsecurity.com/scorpion-labs-blog/anatomy-of-an-iot-exploit-from-hands-on-to-rce 作者:David E. Baker,发布日期:2023年6月1日 前言 本研究针对的是2020年6月Wavlink...
CVE-2023-31853
CVE-2023-31853 Existe un ataque de cross-site scripting XSS reflejado en la interfaz de gestión basada en web del Cudy LT400. La página /cgi-bin/luci/admin/network/bandwidth tiene XSS reflejado a través del parámetro icon. Los métodos de explotación implican enviar una solicitud especialmente...
cve-2024-0012_9474-panos_authbypass_reproduction
CVE-2024-0012 / CVE-2024-9474 — Bypass de autenticación en PAN-OS → Cadena de escalada de privilegios CVE| Descripción| CVSS ---|---|--- CVE-2024-0012| Bypass de autenticación de la interfaz de gestión de PAN-OS| 9.3 CVE-2024-9474| Escalada de privilegios en PAN-OS| 6.9 Cuando se encadenan, estas...
VMware VRealize Network Insight - Remote Code Execution
VMWare Aria Operations for Networks vRealize Network Insight is vulnerable to command injection when accepting user input through the Apache Thrift RPC interface. This vulnerability allows a remote unauthenticated attacker to execute arbitrary commands on the underlying operating system as the ro...
RealTek Jungle SDK - Arbitrary Command Injection
There is a command injection vulnerability on the "formWsc" page of the management interface. Successful exploitation of this vulnerability could lead to remote code execution and compromise of the affected system. id: CVE-2021-35395 info: name: RealTek Jungle SDK - Arbitrary Command Injection...
CVE-2020-16898_Check
CVE-2020-16898Check Pequeño script de PowerShell que comprueba si hay interfaces vulnerables...
struts-rce-cve-2017-5638
struts-rce-cve-2017-5638 Struts-RCE CVE-2017-5638 Este es un exploit modificado que crea una webshell y proporciona una interfaz similar a bash/cmd para interactuar con la webshell en la consola...
Roxy
Roxy Proxy de interceptación HTTP minimalista basado en terminal. https://github.com/user-attachments/assets/94f9c9ae-5842-4b19-9f5b-84dedb9430e6 Descripción general Roxy es un proxy de interceptación HTTP ligero con una interfaz de usuario de terminal TUI construido en Rust. Te permite capturar,...
CVE-2026-82967
IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an unauthenticated remote attacker to bypass IP-based access controls and access the Guardium management interface...
CVE-2026-61714
FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.2.4 until 2.5.6, configuring synth.midi-channels above 16 allows the MIDI player to index fluidplayert::channelisplaying outside its fixed-size heap allocation while tracking active channels. The resulting...
EUVD-2026-83412
IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an unauthenticated remote attacker to bypass IP-based access controls and access the Guardium management interface...
CVE-2026-82967
IBM Guardium Data Protection 12.2 is affected by an authentication bypass vulnerability that allows an unauthenticated remote attacker to bypass IP-based access controls and gain access to the Guardium management interface. The flaw effectively nullifies the IP-restriction layer that would otherw...
CVE-2026-82967 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an unauthenticated remote attacker to bypass IP-based access controls and access the Guardium management interface...
CVE-2026-82967 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an unauthenticated remote attacker to bypass IP-based access controls and access the Guardium management interface...
CVE-2026-85478
A CM2507 IP camera running firmware version HMT.CM2507 v251211.1507 exposes an interactive bootloader through a physical debug interface without requiring authentication. An attacker with physical access could interrupt the normal boot process and access functionality that permits inspection or...
server
Ulterius: Gestión remota sencilla ¿Interesado en la sublicencia? ¿Quieres usar nuestro código en tu stack o renombrarlo para uso interno? Ponte en contacto con nosotros en [email protected] Ulterius es una herramienta que permite el acceso sin restricciones a un sistema Windows a través de u...
EUVD-2026-83046
A CM2507 IP camera running firmware version HMT.CM2507 v251211.1507 exposes an interactive bootloader through a physical debug interface without requiring authentication. An attacker with physical access could interrupt the normal boot process and access functionality that permits inspection or...
CVE-2026-85478 CareCam CM2507 Missing Authentication for Critical Function
A CM2507 IP camera running firmware version HMT.CM2507 v251211.1507 exposes an interactive bootloader through a physical debug interface without requiring authentication. An attacker with physical access could interrupt the normal boot process and access functionality that permits inspection or...
CVE-2026-85478
The CareCam CM2507 IP camera running firmware HMT.CM2507 v251211.1507 exposes an interactive bootloader through a physical debug interface with no authentication required . An attacker with physical access can interrupt the normal boot process and inspect or modify boot configuration, firmware da...